This article explains how to remotely extract credentials from lsass, thus avoiding using Mimikatz and most antivirus detection.

Basically a script thrift shop. Contribute to 0vercl0k/stuffz development by creating an account on GitHub.

Posted by Samuel Groß, Project Zero Introduction This is the first blog post in a three-part series that will detail how a vulnerability...

Mimikatz provides the opportunity to leverage kernel mode functions through the included driver, Mimidrv. Mimidrv is a signed Windows…

Shift5 co-founder Josh Lospinoso talks about how C++ can be a vital tool for infosec developers. In this talk, he presents a simple Stage 0 Implant written in modern…

In this talk, we perform a systematic assessment of recently proposed mitigation strategies by Apple. We demonstrate that most of these defenses can be bypassed through corrupting unsafe kernel objects. We summarize this type of attack as ipc_port Kernel…

Estimated Reading Time: 10 minutes Note : This article contain two parts one for Blue Teams and the other for red teams. go to the part you interested in or read both if you are purple team guy 😀 . MuddyWater is a well-known threat actor group founded by…

Remote Desktop Gateway (RDG), previously known as Terminal Services Gateway, is a Windows Server component that provides routing for Remote Desktop (RDP). Rather then users connecting directly to an RDP Server, users instead connect and authenticate to the…

Automatic ROPChain Generation. Contribute to d4em0n/exrop development by creating an account on GitHub.

It’s no secret that attackers are looking for new techniques to execute lateral movement. However, there are only a handful of publicly…

Offensive operators typically have their set of “go to” post-exploitation tools and methodologies. Among these, is Cobalt Strike — a very…

Interacting with Azure, offensively

Oh man where to even begin with this one. This was a crazy ride and I learned a ton along the way.

Marcello Salvati // This fairly lengthy blog post aims at providing Red Team Operators ideas on how to incorporate BYOI tradecraft into their own custom tooling and get those creative […]